Storing credentials

Storing Credentials

Normally an application would store credentials in a database (RDBMS, LDAP, etc.) for retrieval in the future by a functionality such as login procedures, data verification, etc. By storing credentials we are referring to not only username and passwords but relevant information that might be exploited by attackers in one way or another. Example of these credentials are the following: